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(54) Abstract Title 

Downloading custom software to a unique computer 



(57) Software is downloaded to a computer system from 
a custom programmed compact disk (CD-ROM 106) which 
is configured to be able to be downloaded only to a 
pre-determlned computer system 104. The computer 
system Is booted from a floppy disk 108. The floppy disk 
108, the CD-ROM 106 and the computer system itself 104 
all bear unique ID codes. During the boot process, the boot 
program checks the ID codes of all installation disks plus 
the computer system, and permits software Installation 
only if all those ID codes correspond to codes 
pre-registered on the CD-ROM 106. The advantage is that 
for custom-built PC systems software can be supplied to 
order in a way which permits installation on only a single 
unique system, thereby reducing the scope for software 
piracy and permitting a user to re-install the original 
software in order to reset the system back to its original 
factory settings. 
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METHOD AND SYSTEM FOR SUPPLYING A CUSTOW^SOFTWARE 
IMAGE TO A COMPUTER SYSTEM 



5 A computer system is typically purchased and supplied as a combined 

hardware-software system. In the past, software has been supplied via flexible (floppy) 
diskettes that was manually loaded into a diskette drive by a purchaser and down- 
loaded diskette-by-diskette. As the memory and disk drive capacity has expanded and 
the size of software images has soared, loading of software via flexible diskette has 
10 become very cumbersome. For example, the size of a typical software system image 
has expanded to a range of 2 to 600 megabytes and is expected to continuing growing 
in the future. A large number of flexible diskettes, for example on the order of 50 
diskettes, is typically used to transfer a typical software system image. 

Many computer system suppliers have replaced flexible diskettes with high- 
IS capacity compact disk (CD) ROMs for supplying software images. The computer 
system suppliers that supply software on CD ROMs only sell a limited number of 
hardware configurations (for example 4 to 8) that utilize even fewer software 
configurations (for example 2 or. 3). The software system includes a common 
operating system, hardware drivers, software utilities, and application programs for 
20 usage among all computer systems of a particular configuration. These computer 
system suppliers have the software diskettes pressed en masse, generally in batches in 

*t 

the ten thousand to the hundred thousands range, so that identical software systems are 
supplied interchangeably to many computer systems. 

Thexonventional hardware computer system typically includes various 
25 different hardware subsystems. During installation of these conventional mass- 
produced software systems to hardware computer systems, some software 
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configuration is generally performed. The downloading process often includes routines 
that automatically detect an identification of the hardware subsystems and build 
appropriate drivers for the detected subsystems. 

- Many differs hardware vendors supply the hardware^rbsystems and oft™ 
5 many different software suppliers supply software modules supplied on the mass- 
produced diskettes. A common problem with the conventional technique for supplying 
software to a computer system using mass-produced software is that various 
inconsistencies often arise among the various hardware subsystems aadthe software 
modules. Ttofirs&time,^^ 
10 c^ed,mwfam,a<c^^ 

.has.lefttfhe^ctory. A customer typically does not have the expertise to correctly set 
up various configurable characteristics of the hardware and software to optimally 
execute the software on a particular hardware configuration. Therefore, bringing up a 
system is often a painful and time-consuming exercise for the both the computer 
15 system customer and the vendor with the customer making frequent usage of the 
vendor's customer help services. 

Dell Computer Corporation 1 * 1 avoids the difficulties of software-hardware 
system integration by "custom" building each computer system to order. A customer 
orders a computer, specifying particular hardware subsystems and software packages. 
20 The software-hardware integration, including installation of particular drivers for the 
hardware that is installed in foil native mode m the computer, is performed in the 
factory by Dell Computer Corporation™, tested, and assured of comp atibility befor e 
the combined system leaves the factory. TneTsoftware^thus^ 

.. r ^ .^.w.^tt.svstem.and also assured to^p^mvCor^lQn^. 

25 n arriculafrdriv^l ^tth^ 

One consequence of the build-to-order business model is that each software 
load is potentially unique. Therefore, software cannot be supplied by mass-produced 
diskettes^ Dell™ has therefore supplied a software image liybriiigiiig up the software 
on the specified hardware in the factory, assuring that the software load operates 
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properly, then shipping the computer system with the software image loaded onto a 
hard disk drive in the computer system. 




5 software image is supplied on the hard disk drive, any unsuitable changes in the 
software image are not easily corrected. When a customer has a problem that is 
corrected by writing correct data to the hard disk and the customer has not made a 
backup medium, thmiDdl^makes*theicorre^^ 

diskJcontaimngJtherori Typically a third party 

1 0 maintenance person is sent to the customer site to swap out the corrupted hard drive 
with the replacement hard drive and perform the installation process. Deli™ makes 
the replacement whether the difficulty with the hard drive is caused by system failure 
or by unauthorized or prohibited actions by the customer. For example, a customer 
may install a different hardware subsystem and incorrectly install software drivers for 
I 5 controlling the hardware subsystem, thereby corrupting the hard drive. 

The replacement hard disk drives are used as a primary method for sending 
software to the field to correct many problems. The problems indude, for example, 
corruption of files by the customer or by a virus, difficulties with installation of a . 
hardware subsystem that was not supplied by the factory^ decision by the customer to 
20 change the operating system, a bad factory software download, malfunction of the hard 
drive, and the like. 

Unfortunately, replacement of the hard drive is expensive and often 
inconvenient for the customer. Hard drive replacement is expensive not only due to 
the cost of the hard drive but also due to the equally large cost of a third party 
25 maintenance call and extensive handling and testing of the returned hard drive. 

Wg^ismeededlbTalsysto 
sofhvarc^ipoageWa'com^ 
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A method and system for supplying a software image to a computer system 
utflizeiaicustoiiHprogran^ 
sp^ediMwdualiromputwts^^ 

operaBlSWonly^tffiTsp^a»iSi^^ method and system 

further utilize an installation procedure for restoring the specified computer system to 
the software state that the computer was in at the time the computer left the factory 
after initial configuration and downloading. The custom-programmed CD ROM is 
delivered to a customer in combination with a bootable flexible diskette, and an 
instructional technical instruction sheet for usage by the customer to restore the 
computer system to a "factory new" software condition. 



A protection technique is defined utilizing three components including the 
computer system, the custom-programmed CD ROM, and the bootable flexible 
diskette that are mutually and uniquely keyed so that loading of the software image is 
15 only possible when all three components are employed in comb ination. Thnsifrspccifi c 
cus^-programm^re^ 
keyTnk'can'onry'oe^i^ 

bju^wasjti^l^itheTsanKil^in^TBe protection technique eliminates a possibility 
that the software image could be loaded onto any compuw hardware other than the 
20 computer hardware keyed to receive the software. TtoptoteetfetK^ 
cross^refenrangrt^ 
writingltfithelta*^^ 

disKate|^faVimiqueSecviceitag»m Only a matched 

combination of the specific cross-keyed custom-programmed CD ROM, the specific 
25 associated bootable flexible diskette, and the uniquely-keyed computer hardware, 
employed together, allow reloading of the software image contained on the custom- 
programmed CD ROM. 

A i first operation in the protection technique is creation of a combination of 
uniquely-keyed custom-programmed CD ROM and bootable flexible diskette. An 
30 original customer order is processed and a specific customer-determined software 
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- image load is compiled according to the original customer order. The software image 
is usually downloaded to the computer system hardware in the factory, then shipped to 
a customer. The customer-determined software load is a software image specifically 
configured for writing to the hard disk drive of the specified computer system " 
5 hardware. fa^n*in^6ffw 
written tojjte^stom?^^ 
the sp^fi^ ^^pufr^-y 

^image^The combination of the software image and the identification file are burned 
onto a CD ROM media platter. The;speciified:l&dl^ 
10 corie^nding:identificat^ 

custom-programmed CD ROM and the iiame of the 
pro p^nmed-GE> ROM-that ^ 

€5%OM The bootable flexible diskette also stores a CD restoration program, an 
executable file that controls the process of restoring the software image to the 
15 computer system. The associated custom-programmed CD ROM and bootable flexible 
diskette are sent to the customer in combination with a service kit Technical direction 
sheet. The customer has the originally-ordered and configured computer system 
hardware. 

Upon receipt by the customer, the service kit Technical direction sheet directs 

20 the customer to place the bootable flexible diskette in corfiputer system flexible disk 

drive slot, place die custom-programmed CD ROM in the computer system CD ROM 

slot, and reboot the computer system. The bootable flexible diskette stores a CD 

restoration program that is activated upon boot loading of the computer system. The 

CD restoration program first downloads and opens the tag ID file contained on the CD 

25 image from the custom-programmed CD ROM. In addition to opening the tag ID file 

on the custom-programmed CD ROM, the CD restoration program opens the ID file 

from the bootable flexible diskette and verifies that the tag information in the ID files 

match in the custom-programmed CD ROM and the bootable flexible diskette. 

: \ " " r ^ ^ 

The£ETrestoration-program includes an iristalladoo program that obtains the 

30 S emce-Tag jrumber: from thexomptiterexecutir^ The 
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-computer Service Tag number is compared to the tag information contained the ID file 
stored on the custom-programmed CD ROM. If the computer hardware Service Tag 
matches the tag ID on the custom-programmed CD ROM. the restoration program 
completes a hard drive restoration program by dealing the information on the hard 
5 drive and downloading the software image from the custom-programmed CD ROM to 
the hard disk drive. If the service tag numbers do not match, then the Service Tag 
number accessed from the computer hardware is reported to the customer along with 
instructions to the customer directing the customer to additional service assistance. 

Many advantages are achieved by the described system and operating method 
1 0 One advantage is that the software transport system reduces the cost of 

troubleshooting and correcting software problems in the field. The software transport 
system advantageously reduces the initial field incidence rate of hard disk drives, a 
measure of reliability failures of computers upon initial delivery from the supplier. 
The software transport system advantageously reduces the number of hard disk drive 
15 failures that are not duplicated in testing upon return of the computer system. 

The protection technique advantageously restricts utilization of licensed 
software to the angle unique computer for which the license is granted while avoiding 
interference with the baric process that allows free software loading of the computer. 



2o An example of the present invention will be described in accordance 

with the accompanying drawings, in which: 

FIGURE 1 is a schematic block diagram illustrating an embodiment of a 
25 software transport system for supplying a software image to a computer such as a 

personal computer (PC). 

\ • - r 

FIGURE 2 is a flow chart that illustrates acts that are carried out in applying 
the protection technique of the software transport system. 
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FIGURES 3A and 3B show a flow chart thai illustrates acts that arc performed 
to manufacture a software transport package. 

FIGURE 4 is a block diagram which depicts computer system hardware 
implementing an operating system independent method for avoidtng-operating system 
5 security for operations performed by essential utilities. 

FIGURE 5 is a pictorial illustration of a memory map of memory in the 
computer system shown in FIGURE 4. 

FIGURE 6 is a block diagram which depicts various functional blocks of a 
software system that supplies full XBIOS functionality without voiding the security of 
10 the operating system. 



Referring to FIGURE 1, a schematic block diagram illustrates an embodiment 
of a software transport system 100 for supplying a software image 102 to a computer 
104 such as a personal computer (PC). The illustrative software transport system 100 

15 includes a database 116 and a compact disk (CD) ROM burner 118 that operate in 
combination to produce three software transport components: (1) a custom- 
programmed compact disk (CD) ROM 106, (2) a bootable flexible diskette 108, and 
(3) a service kit Technical direction sheet 110. The three components* in combination, 
deEne and implement an installation procedure for restoring the computer 104 to a 

20 "factory new** software state Chat is identical to the state of the computer 104 at the 
time the computer 104 leaves the factory after initial configuration and downloading. 

The three components have different purposes. The custom-programmed CD 
ROM 1 06 is a software transport medium for transferring the software image 102 to a 
main executable storage in the computer 104, typically a hard disk drive 112. The 
25 bootable flexible diskette 108 is a software download medium for controlling 

downloading from the custom-programmed CD ROM 106. The service lot Technical 
direction sheet 110 is an instruction list that instructs a user to download the software 
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image 102 from the custom-programmed CD ROM 106 using the bootable flexible 
diskette 108. 

The database B 16 includes a mass storage controller 120, a mass storage 122 
that typically includes a plurality of mass storage devices includttytard disk drives, 

5 CD ROM drives, magnetic tapes, and the like. The mass storage controller 120 
controls the mass storage 122 to access information such as software codes in various 
formats including source, object, absolute, binary codes, software images and the like. 
The mass storage controller 120 includes various programs for processing the software 
codes such as assemblers, compilers, linkers, and the like for forming a software image 

10 that is typically down-loaded to a hard disk drive in a computer for running programs. 

In the illustrative embodiment, the mass storage controller 120 is connected to 
the mass storage 122 and the CD ROM burner 118 to transfer software codes from the 
mass storage 122 to a CD ROM medium. The mass storage controller 120 is also 
coonectable to the computer 104 to download programs from the mass storage 122 to 
15 a hard disk drive 1112 of the computer 11 04. 

One operation of die mass storage controller 120 is the production of a 
software image 102 for downloading to the hard disk drive 112 of the computer 104 
and subsequent program execution by the computer 104. A hardware and software 
configuration of the computer 1U is entered onto the mass storage controller 1215 to 

20 determine the software components to be included in the software image H®2. The 
mass storage controller 120 executes the various processing programs to produce the 
software image 102. The image is downloaded to the computer 104 and the hardware 
acd software package making up the computer 104 are shipped to a customer. The 
process of supplying the software image, from entering the customer order to 

25 downloading the software is automated or semi-automated. 

The same automated process is used to generate the custom-programmed CD 
ROM 106. ^The custcwprogrammed CD ROM i06 is made available to the customer 
in case difficulties arise in the computer system. In some systems, the software image 
102 created during original programming of the computer system is stored in the mass 
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storage 122. In other systems/the software image 102 is regenerated when needed 
amply by re-entering the original customer order. 

For example in an illustrative system, the same automated process is used to 
generate a software image for downloading to a hard disk drivepsnd-to generate an 

5 image for burning onto a CD ROM. However, instead of downloading the image to a 
hard drive, the software image is transferred to the CD ROM burner 118 for writing 
the software image 102 to the custonvprogrammed CD ROM 106, the bootable 
flexible diskette 108 is programmed, and the CD ROM and diskette package are sent 
to the customer. The automated process advantageously exploits internal process 

1 0 control scripts built using an automated or semi-automated technique that generates 
the custom-programmed CD ROM 106 and the bootable flexible diskette 108 in a 
cost-effective and efficient manner. Although the control scripts are potentially 
complex, the automated technique facilitates generation of the software transport 
media without requiring skilled operators. 

15 TbexuSom^^^ 
speSIedln^^ 

the^eafied ifilmAia^^ bootable flexible diskette £08 is 

individually coded to match the custom-programmed CD ROM 106 and the specified 
individual computer. The software image 1102 formed onjthe custom-programmed CD 
20 ROM H®6 precisely matches the configuration of the computer hardware to the 
detailed level of each device, bus, BIOS, device driver, and operating system. 
Advantageously, the software image 102 is written to the hard disk drive US2 and the 
computer H04 immediately is activated with the correct software configuration for 
driving the installed hardware. 

25 The software transport system 3100 further implements a protection technique 

by special configuration of the computer 1104, the custom-programmed CD ROM 106, 
and the bootable flexible diskette 108 that are mutually and uniquely keyed so that 
{loading of the software image is only possible when all three components are employed 
in combination. 
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fdnttaLQommoj^sofb^^ 
kcying rand j re o^jusabj^^^ 

S identification (ID) numbers are coded by applying the tag ID to the custom- 
programmed CD ROM m and the bootable flexible diskette 108. Ttoecomputeo 
.hardwarelMSbo^ * 

\ ' 

duj^rtheinianufac^ 

The protection technique prohibits loading of the software image 102 onto any 
computer hardware other than the computer hardware 104 keyed to receive the 
software image 102. Reloading of the software image 102 contained on the custom- 
1 5 programmed CD ROM 106 onto a hard disk drive 1 12 of the computer 104 is allowed 
only for a matched combination of the specific cross-keyed custonvprogrammed CD 
ROM 106, the specific associated bootable flexible diskette 108, and the uniquely- 
keyed computer hardware 104. 

Referring to FIGURE 2 in combination with FIGURE 1, a flow chart 
20 illustrates acts that are carried out in applying the protection technique 200 of the 

software transport system 100. The protection technique 200 advantageously restricts 
utilization of licensed software to the single unique computer for which the license is 
granted while avoiding interference with the base process that allows free software 
loading of the computer. 

25 In a create software image operation 202, an original customer order is 

processed and a specific customer-detennined software image 102 load is compiled 
according to the original customer order. The cu^omer-detennined load is a software 
image 102that is specifically configured for writiiig to the hari 
specified computer hardware 104. Accordingly, the software image 102 is the same as 
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The hard disk image that is originally downloaded to the hard disk of the computer 
system hardware in the factory, then shipped to a customer. 

Once the software image 102 is created, the protection technique 200 performs 
a create keyed package operation 204 in which key codes are&raied for a combined 
5 uniquely-keyed custom-programmed CD ROM 106 and bootable flexible diskette 108. 
The keys are create*!^ 
TOmput^hardw^ 

fc^r^ tag identification^ 1,1 
addition to a key based on the Service Tag, the tag ID forming operation 208 includes 

10 the act of generating a random number character. In the illustrative embodiment, the 
S ervice Tag from the computer 1 04 and the random number are used as a key that are 
written both to the custom-programmed CD ROM 106 and the bootable flexible 
diskette 108, thereby serving as a basic identifier for preventing utilization of licensed 
software on any computer other than the computer 104 for which the software is 

15 licensed. 

A write CD ROM operation 210 burns the combined software image 102 and 
tag ID file onto the custom-programmed CD ROM medium. 

Other operations of the create keyed package operation 202 prepare the 
bootable flexible diskette 108. A create flexible diskette ID file operation 212 forms an 

20. ID tag file containing tag information for the custom-programmed CD ROM 1106 
including coding of the Service Tag and the random number tag, and containing the 
name of the tag ID file on the custom-programmed CD ROM 106. The create flexible 
diskette HD file operation 212 then writes the ID tag file to the bootable flexible 
diskette 108. A create restoration program operation 214 stores a CD restoration 

25 program to the bootable flexible diskette 1108. The CD restoration program is an 

executable file that is run by a users, such as a customer, to restore the software image 

102 to the hard disk drive 112 of the computer i04. In some embodiments, the CD 

* - - j 

restoration program operates automatically, without user intervention: In some 
embodiments, tthe CD restoration program operates automatically with the only 
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: intervention being display of a warning message and a wait time to allow the user to 
respond to the warning message. 

In a send software transfer package operation 216, a package indudfing the 
custom-programmed CD ROM 106, the bootable flexible diskette-M)8. and the service 

5 kit Technical direction sheet HBO is sent to the user or customer. The user is presumed 
to have possession of the originally-ordered and configured computer system hardware 
104. The service kit Technical direction sheet ISO supplies the user with instructions 
for using the custom-programmed CD ROM 106 and the bootable flexible diskette 108 
to restore the hard disk drive U2 to the exact software condition of the computer 104 

10 when shipped originally from the factory. Any software installed onto the computer 
104 or daw loaded to the hard disk drive 112 after original delivery are eliminated so 
that all data values and processor conditions are initialized. 

The users receives the software transfer package and the service kit Technical 
direction sheet 110 fte user t o execute the restotationi groBr^gJSteiP^qag 
l5 thexusto tti^rognmHO^ ^ 

fose^tbeio^teflon^^ 

&smo^-tf&mm^-*M-®tte technique for rebooting the computer 104 is to 
power down the computer, waiting about thirty seconds, and applying power to the 
computer 104. The bootable flexible diskette 2 US store^tfae restoration program that 

20 is activated upon bootstrap loading of the computer 104. The execute restoration 
program act 2S3 simulates the software download part of the m^fectuiing process 
by modifying the master boot record of the hard disk drive 1 12 to invoke a special 
restoration operating system. Special operating system files mduding EXE, .BAT, 
and CONFIG.SYS files are activated to load a CD ROM driver and find the software 

25 image 102 on the CD ROM. 

In a check ID tags operation 220, the restoration program first downloads and 
opens the tag ID file contained on the CD 5mage.,from the custom-programmed CD 
ROM lOtf^lh addition to opening the tag ED file on the custonvprogrammed CD 
ROM 1 OS, the restoration program opens the H> file from the bootable flexible diskette 
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aCS and verifies that ehe tag information in the ID files match in the custom- 
programmed CD ROM 106 and the bootable flexible diskette 108. 

5n an ^ea5e1nsta¥ation pro 

obyuns-the^^ 

5 inflation program? The installation program is typically stored on the bootable 
flexible diskette BOS but may be stored in other storage devices, such as the custom- 
programmed CD ROM 106, in other embodiments. 

TTheinstallal^ 

lyjone^fseverall^ Illustratively, she installation program-accesses 

10 the^^ceTagl^^ 

processor of the:cdmputor:104. In other implementations; other techniques or 
combinations of techniques may be used to access the Service Tag number. For 
example; a protection technique that is applicable to multiple types of computer 
systems may use multiple techniques for accessing the Service Tag. In one 

1 5 implementation a computer system ID code is accessed by the installation program to 
determine the hardware and software platform of the executing computer, thereby 
indicating a suitable technique for accessing the Service Tag. For a first type of 
computer, XBIOS calls are used to access the Service Tag. Ar^^dltype^T^^ 
comp uteg' has a Semce-Tag tha t is -accessed-vifr pgogftr^ 

20 0£CS:IM!Hfi^^ A third type of 

computer has a Service Tag that is accessed using Desktop Management Interface 
(DM0 <^Us. 

The:$ysKmTlD:;code:d^ of the 

system ID code of a computer to determine how to access the Service Tag is 

25 advantageous for allowing the software transport system 100 to support multiple types 
and generations of computers. Usage of different techniques for accessing the Service 
Tag is also advantageous for allowing the software transport system H00 to support 
computers nkming various operating r systems. For example; access to internal storage 
locations differs for computers tunning Windows 95™ and Windows NT™ operating 

30 systems. 
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the computer40^tolhe-tag^ 

prog rammed GD RQ Mlg^. If the Service Tag of the computer 104 matches the tag 
ID on the custom-programmed CD ROM 106, then the restoration program displays & 
5 warning message, waiting to allow the user to abort the restoration program, and then 
complete the hard disk drive restoration process. The warning message informs the 
user that the hard drive is about to be erased and supplies a button aeon to abort the 
restoration process. Thus the user is allowed to abort the operation and transfer data 
before erasing important data from the hard disk. 

10 The hard drive restoration process completes by clearing the information 226 

on the hard drive 1 12 and downloading 228 the software image 1 ©2 from the custom- 
programmed CD ROM 106 to the hard disk drive US 2. The restoration program clears 
the hard disk drive 1 12 by formatting the hard drive 1 112 to erase possibly corrupted 
data, insure proper operation of the drive, and eliminate any viruses that may have 

15 infected the drive 112. The restoration program downloads the software image 102 by 
copying all software originally ordered and configured from the custom-programmed 
CD ROM 106 onto the hard disk drive 112 in a correct order. As the filed are copied 
to the hard disk drive 1 12, file attributes are correctly assigned or reset for operation 
of the software image 102. The copy process is moderately time consuming, typically 

20 enduring for 10 to 25 minutes. Following copying of the Ses, a check software 
transport operation 230 executes a routine that verifies that the software-hardware 
keying and software download were performed and executed correctly. The 
restoration program terminates 232 by displaying a message on the computer display 
requesting that the user remove the CD ROM from the reader, removing the bootable 

25 flexible diskette 108 from the drive, and rebooting the computer Following the 
second reboot operation, the computer 104 is in (the identical condition of the 
computer at the original delivery with the possible exception of differences resulting 
from any modifications made to the original software order by agreement between the 
user or customer and a fectory representative. 
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In various embodiments, additional protection techniques may be implemented. 
For example in some systems, data from files on the custom-programmed CD ROM 
106 may be changed in a defined manner prior to programming of the custom- 
programmed CD ROM 106. The restoration program reverses the defined changes as 
5 the software image Jl 02 is written to the hard disk drive H 02. The additional protection 
technique prevents unauthorized reading of data from the custom-programmed CD 
ROM BO 6 and writing of the data to disk using a utility program. 

If the Service Tag of the computer 104 does not match the tag ID on the 
custom-programmed CD ROM 106, then the restoration program generates an error 
10 condition signal 234. The restoration program supplies diagnostic information, 
including the Service Tag number accessed from the computer hardware IM and 
supplies instructions to the user directing the user to additional service assistance. 

Referring to FIGURES 3A and 3B, a flow chart illustrates an exemplary 
process including acts that are performed to manufacture a software transport 
15 package. The software transport package includes a custom-programmed CD ROM 
1106, a bootable flexible diskette 108, and a service kit Technical direction sheet 11® 
for delivery to a customer. 

A software transport package manufacturing process 300 begins when a 
dispatcher enters an order number into an automated/computerized system to retrieve 

20 zl customer order record 302. The customer order record specifies customer-ordered 
software by part number. The dispatcher enters part numbers 304 for the software 
requested in the customer order. The dispatcher then enters a dispatch issue status 306 
as a short order that includes a purchase order (PO) field, a shipping method, and tie 
numbers. The dispatcher verifies that the shipping address is correct 308. The 

25 dispatcher generates an exchange order number 310 and logs the dispatch into a 
dispatch comments log 312. 

The ldgged order is automatically printed in fidd service 314. Field service 
builds and delivers a hard drive 316 including loaded customer-specified software to a 
CD ROM burn station. 
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The CD ROM bum station process begins 318 and field service personnel at 
the CD ROM bum station connect the hard drive to the CD bum station 320. The 
field service personnel look up a customer service tag from the dispatcher 322. The 
field service personnel then run a PREPBAT routine 324 thatpn^ares the haril disk 
5 drive for copying the software image, copies files from the hard disk drive to a flexible 
diskette, and runs a MAKETAGJEXE routine that makes the identification tags 
described hereinbefore for mutually associating the computer, CD ROM, and bootable 
flexible diskette. The PREPJB AT routine prompts entry of the Service Tag. 

The field service personnel runs CDBURNJFLU 326 which bums the custom- 
10 programmed CD ROM 106. The field service personnel enters the Service Tag into 
the bum station software 328 and burns the custom-programmed CD ROM 106 with 
the customer-ordered software image 3345. The field service personnel putts a service 
kit Technical direction sheet 1 10 from stock 332 and places the custom-programmed 
CD ROM 106. the bootable flexible diskette 108, and the service kit Technical 
15 direction sheet 110 into a shipping carton 334. The field service personnel then 
delivers the shipping carton to shipping 336 for customer delivery. 

Referring to FIGURE 4, a computer system 400 is shown which runs a system 
for creating an operating system independent environment for executing utility 
programs. The compute? system 400, typically a personaUomputer, includes & 

20 processor 410, a system random access memory (RAM) 420, a system ROM 422, a 
hard disk drive 430 and various other input /output devices 440. These system 
components communicate via a bus 450 which includes data, address and control lines. 
A CMOS dock nonvolatile RAM 460, winch is connected to the processor 410 via the 
bus 450, is typically utilized to store information even when power to the computer 

25 system 400 is interrupted. Program instructions that make up the system for creating 
an operating system independent environment are stored in a storage device such as 
the hard disk drive 430 or the system ROM 422 connected to the processor 410. The 
processor «W>, for example- an x86 processor such" as a 486, 586 or Pentium™ 
processor, executes the computing operations of the computer system 400. 
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Referring to FEGURE 5, a memory map 500 of a computer system shows a 
program memory 510 having a starting address of 0000H, a video memory 512 with a 
starting address of OA000H and a BIOS memory 524 located at addresses 0F000H to 
OFFFFR A base input output system (BIOS) is the part of an operating system that 
customizes the operating system to a specific computer. The BIOS forms the lowest- 
level interface to common devices such as a system clock, hard disk and display, for 
example. The BIOS memory SM includes information for interfacing to an extension 
basic input output system XBIOS 520. 

The XBIOS 520 extends BIOS functionality of a computer system. In 
particular, various computer system integrators include an XBIOS memory 520 to 
famish extended features to die standard BIOS functionality. Some of these features 
are induded to facilitate usage of programs for the benefit of the computer user. 
Specifically, with respect to functionality that is achieved by an embodiment b 
accordance with the present invention, BIOS functionality is used to pass an address of 
a control block to the system management mode (SMM), which performs an operation 
designated by the control block. One such operation is updating of the protected 
partition table. Another operation is the identification of a particular physical sector 
location on a disk drive. Other features that are typically performed by the BIOS may 
include management of a battery icon for displaying battery life remaining of a 
rechargeable battery and operating a control panel for setting power management 
parameters. The features also include WinCPL, an application that enables execution 
of power m a n a g e me nt fiinetk>n^without invoking a system setup operation. WinCPL 
controls various security operations such as setting of a password, control of speaker 
volume, enablement of simulated key dick, modification of display parameters such as 
brightness and contrast. ThejfeatiJx^furthS 
compute^ 

go read the ;assyjgr^ag^tag^ The asset tag is useful for identifying and inventory of 
computer systems for accounting purposes and the Eke. Still another feature is a 
monitor.exe executable file that controls video monitor parameters such as video bias, 
nnonitor refresh rate and the like. 
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The XBiOS 520 stores a plurality of pointers that point to entries in an XBIOS 
table 522. The XBIOS table 522 includes a plurality of pointers to memory addresses 
for various, assigned application program functions 524. Each individual XBIOS 
program function 524 has a separate entry in the XBIOS table 522 and a separate entry 
5 point that is stored in the XBIOS table 522. 

In one mode of operation, the program code in the XBIOS 520 operates by 
transferring operation identifiers and parameters to the CMOS memory 4tf0 and 
performing an input/output instruction that evokes a SMI# signal. The SMI# signal is 
a signal for activating a system management mode (SMM) of operating. When a 

10 processor 410 recognizes a SMX# signal on an instruction boundary, the processor 410 
waits for all store operations to complete. The processor 4S0 then saves the processotr 
register state to a region in memory called a system management RAM (SMRAM) 
space and begins to execute a SMM handler routine. The SMI# intemipt has a greater 
priority than debug exceptions and external interrupts so that SMM processing 

15 preempts debug and external intemipt conditions. Subsequent SMX# and nonmaskable 
intemipt (NMI) requests are mot acknowledged while the processor as operating in 
system management mode. 

System management mode (SMM) processing is conventionally performed by a 
technique in which software routines write a defirced pattern or code to a specific 

20 defined SMS input/output H/O location. A pattern is defined to be suitabty complex 

that an incorrect and unsuitable r^emhiMrt inadvertently set Generally, the patterns 
encode a sufficient amount of operational information that this level of complexity is 
easily achieved. Advantageously, the pattern coding is sufficiently specific to the 
precise XBIOS operations invoked that the security of a secured operating system is 

25 not compromised while useful functions are allowed to operate which would otherwise 
be prohibited by the operating system. The writing of this pattern to the SMI I/O 
location generates an SMI# signal, evoking a system management mode intemipt. 

Refesring to HGURE 6, a bfock diagram is shown which depicts the 
operations of a software system 600 that supplies full XBIOS functionality. The 
30 software system 600 furnishes an interface for system management mode (SMM) 
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operation. In this interface, an application program 6S0 does not directly attempt to 
invoke an SMI# interrupt, but instead the application program 610 calk the XBIOS 
614 to request a SMM operation 620. The SMM operationj$20 is activated 
independently of the operating system 602 operation and control. 

5 In the software system 600, an application software program 610 is prepared 

for execution using dynamic linking capabilities of a target operating system 602, such 
as Windows NT™, Windows 95™, OS/2™ or the like, so that the dynamic finking 
environment includes a link step and a program loading step governed by the operating 
system 602. The linker scans a set of dynamic link libraries (DLL) 604. Some of the 

10 libraries include runtime support code that is linked into an executable file 612. Other 
libraries, called import libraries, contain references to functions that are not fully 
resolved until the operating system 602 loads the program executable file 612 for 
execution. A linker in the operating system 602 scans an import library and embeds a 
target module name and a numeric entry point into the executable file 612. When the 

15 operating system 602 loads the executable file 612 for execution, the operating system 
602 replaces these references with addresses that are valid for usage m function calls. 
A dynamic link library (DLL) is a module that satisfies these references by dynamic 
linking. A DLL declares a set of entry points that satisfy external references. 

Various libraries of the dynamic link libraries (DLL) 604 include operational 
20 code for making an XBIOS call which posts the XBIOS request 604, thereby initiating 
an XBIOS routine 603. The application program 610, which utilizes one or more 
XBIOS calls for various low-level functionality, assigns a data storage element for 
handling data. Typically, a known location in memory is assigned by the application 
program 610 for posting the signal 6114 by storing information designating a particular 
25 system management function to be performed. However, some secure operating 
systems, such as Windows NT™, do not allow access or assignment of a particular 
known location in memory. Therefore in the software system 600, general purpose 
registers of tfee processor 410 are assigned to post'the signal 614 and store the 
information designating a requested particular system management function and, upon 
30 servicing by the SMM operations 620 and XBIOS routines 608, to store a response of 
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SivCM/XBIOS processing. In some embodiments, the software system 600 assigns 16- 
bit general purpose registers such as AX BX, CX and DX for storing patterns for 
evoking SMM operations 620 and XBIOS routines 608. In other embodiments, 32-bit 
registers, such as EAX, EBX, ECX and EDX are used to store activation patterns. 

5 While the invention has been described with reference to various embodiments, 

it will be understood that these embodiments are illustrative and that the scope of the 
invention is not limited to them. Many variations, modifications, additions and 
improvements of the embodiments described are possible. For example, those skilled in 
the art will readily impteroent the ster* necessary to provide the stru^ 

10 disclosed herein, and will understand that the process parameters, materials, and dimensions 
are given by way of example only and can be varied to achieve the desired structure as well 
as modifications which are within the scope of the invention. Variations and mo<fifications 
of the embodiments disclosed herein may be made based on the description set forth herein, 
without departing from the scope and spirit of the invention as set forth mtte 

15 claims. 

For example, the embodiments are described as systems for supplying 
protection and security features for the Windows NT™ and Windows 95™ operating 
systems. The invention is applicable with reference to other operating systems 
employing similar security measures, for example and OST^T* Furthermore, the 
20 described embodiments discuss the usage ofgeneral purpose re^sters for 

communicating the polling signaL In other embodiments, other various types of 
temporary storage cells are applicable so long as these cells are not overwritten by the 
operating system. 
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CLAIMS 

1. A software transport package for supplying a 
5 software image to a storage of a computer, the software 

transport package comprising a software transport medium 
storing the software image, the software image being 
configured for downloading to and execution on only a 
single unique computer, the software transport medium and 
10 the computer being mutually keyed so that the software 
image is downloadable to the storage of only the single 
unique computer and no other . 

2. A software transport package according to Claim 
15 1, further comprising a software download medium storing 

a download program controlling downloading of the 
software image to the storage. 

3 . A software transport package according to Claim 
20 2, further comprising an instruction sheet providing 

directions to a user of the software download medium and 
the software download medium for controlling downloading 
of the software image to the storage. 

25 4. A software transport package according to Claim 

2 or 3, wherein: 

the computer includes a first media driver, a 
second media driver, and the storage; 

the software transport medium is loadable to 
30 the first media driver; 

the software download medium is loadable to the 
second media driver, the software download medium 
controlling downloading of the software image from the 
software transport medium to the storage. 

35 

5. A software transport package according to any 

one of Claims 2 to 4, wherein the software download 
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medium controls reformatting of the storage prior to 
downloading of the software image from the software 
transport medium to the storage. 

6 A software transport package according to Claim 

5, wherein the software download medium controls 
displaying of a warning message and waiting for 
intervention prior to reformatting of the storage. 

7 ^ a software transport package according to any 

one of Claims 2 to 4, wherein the software download 
medium controls clearing of the storage prior to 
downloading of the software image from the software 
transport medium to the storage. 

8 ^ a software transport package according to Claim 

7 , wherein the software download medium controls 
displaying of a warning message and waiting for 
intervention prior to clearing of the storage. 

9t a software transport package according to any 

one of Claims 2 to 8, wherein: 

the computer is encoded with a unique 
identifier that distinguishes the computer from all other 
computers ; 

the software transport medium contains a first 
identification file that is keyed with the unique 
identifier; 

the software download medium contains a second 
identification file that is keyed with the unique 
identifier. 

10. A software transport package according to Claim 

9, wherein the second identification file is further 
keyed with an identifier of the first identification 
file. 
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11. A software transport package according to Claim 
9, wherein: 

the first identification file is further keyed 
5 with a randomly-generated number; and 

the second identification file is further keyed 
with the randomly- generated number . 

12. A software transport package according to any 
10 one of Claims 2 to 11, wherein: 

the computer includes a compact disk (CD) ROM 
reader and a bootable flexible diskette drive, and the 
storage is a hard disk drive; 

the software transport medium is an 
15 individually-programmed CD ROM; 

the software download medium is a flexible 

diskette . 

13. A computer program product including computer 
20 usable media having computable readable code embodied 

therein comprising a software transport package according 
to any one of the preceding claims for supplying a 
software image to a storage of a computer. 

25 14. A computer comprising: 

a processor ; 

a storage coupled to the processor for storing 
a software image that is executable by the processor; 

a media drive coupled to the processor; and 
30 a software transport package according to any 

one of the preceding claims. 

15. A computer according to Claim 14, further 

comprising a second media drive coupled to the processor; 
35 and in which the software transport package further 

includes a software download medium that is loadable to 
the second media drive, the software download medium 
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storing a download program controlling downloading of the 
software image to the storage . 

5 16. a computer according to Claim 15 , wherein: 

the first media drive is a compact disk (CD) 
ROM reader; 

the second media drive is a bootable flexible 
diskette drive; 
10 the storage is a hard disk drive ; 

the software transport medium is an 
individually-programmed CD ROM; and 

the software download medium is a flexible 

diskette - 

15 

17. a software product fabrication system 

comprising: 

an order- entry system for receiving a customer 
order including the specification of hardware and 
20 software components of a computer ; 

a software processor coupled to the order- entry 
system for processing the customer -ordered software 
components in compliance with characteristics of the 
customer-ordered hardware components and generating a 
25 software image for downloading to a storage of the 
computer; 

a tag identifier coupled to the software 
processor, the tag identifier accessing a unique 
identifier of the computer; 

30 a software transport medium fabrication device 

coupled to the software processor for forming the 
software image and a software transport medium tag 
identifier file indicative of the unique identifier of 
the computer; and 

35 a software download medium fabrication device 

coupled to the software processor for generating a 
software download program and a software download medium 
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tag identifier file indicative of the unique identifier 
of the computer. 

5 18. A software product fabrication system according 

to Claim 17, in which the software download medium 
fabrication device is arranged to generate a software 
download medium tag identifer file indicative of an 
identifier of the software transport medium tag 
10 identifier file. 

19. a software product fabrication system according 
to Claim 17 or 18, further comprising a random number 
generator coupled to the software processor for 

15 generating a random identification number, in which the 
software transport medium fabrication device forms the 
software transport medium tag identifier file indicative 
of the random identification number, and the software 
download medium fabrication device generates a software 

20 download medium tag identifier file indicative of the 
random identification number, 

20. A software product fabrication system according 
to any one of Claims 17 to 19, further comprising a 

25 storage download device coupled to the software processor 
for downloading the software image to a storage media 
that is installable in a computer, wherein the software 
transport medium fabrication device is connectable to the 
storage media for transferring the software image to the 

30 software transport medium. 

21. A software product fabrication system according 
to any one of Claims 17 to 20, wherein the software 
transport medium stores a copy of the software image that 

35 restores the computer to a factory condition. 
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22. A software product fabrication system according 
to any one of Claims 17 to 21, wherein: 

the software transport medium is a custom- 
programmed compact disk (CD) ROM medium ; 

the software download medium is a bootable 
flexible diskette; and 

the storage is a hard disk drive • 

23. A software product fabrication system according 
to any one of Claims 17 to 22, wherein: 

the software transport medium stores the 
software image and the software transport medium tag 
identifier file indicative of the unique identifier of 
the computer; and 

the software download medium stores : 

the software download medium tag identifier 
file indicative of the unique identifier of the computer 
and indicative of an identifier of the software transport 
medium tag identifier file; and 

an executable program for executing a transfer 
of the software image from the software download medium 
to the storage. 

24. a software product fabrication system according 
to Claim 23, wherein the executable program clears the 
storage prior to transfer of the software image from the 
download medium to the storage. 

25. a software product fabrication system according 
to Claim 24, wherein the executable program displays a 
warning message and waits for intervention prior to 
clearing the storage. 

26. A software product fabrication system according 
to Claim 23, wherein the executable program reformats the 
storage prior to transfer of the software image from the 
download medium to the storage. 
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27. A software product fabrication system according 
to Claim 26, wherein the executable program displays a 
warning message and waits for intervention prior to 
reformatting the storage. 

5 

28. A software product fabrication system according 
to any one of Claims 23, 24 or 26, wherein the executable 
program operates without user intervention. 

10 29. A method of fabricating a software product 

comprising the acts of: 

receiving a customer order including 
specification of hardware and software components of a 
computer; 

15 processing the customer- ordered software 

components in compliance with characteristics of the 
customer-ordered hardware components; 

generating a software image for downloading to 
a storage of the computer from the processed software 

2 0 components ; 

determining a tag identifier that uniquely 
identifies the computer upon which the software image is 
loadable, the software image being loadable on no other 
computer; 

25 fabricating a software transport medium 

including storage of the software image and a software 
transport medium tag identifier file indicative of the 
unique identifier of the computer; and 

fabricating a software download medium 

30 including a software download program and a software 
download medium tag identifier file indicative of the 
unique identifier of the computer . 

30. A method according to Claim 29, further 

35 comprising the act of generating a software download 

medium tag identifier file indicative of an identifier of 
the software transport medium tag identifier file. 
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31. A method according to Claim 30, further 
comprising the acts of: 

generating a random identification number; 
forming the software transport medium tag 
identifier file indicative of the random identification 

number; and 

generating a software download medium tag 
identifier file indicative of the random identification 
number . 

32. A method according to any one of Claims 29 to 

31, further comprising the acts of: 

downloading the software image to a storage 
media that is installable in the computer; and 

transferring the software image to the software 
transport medium. 

33. a method according to any one of Claims 29 to 

32, further comprising the act of storing a copy of the 
software image in the software transport medium that 
restores the computer to a factory condition. 

34. A method according to any one of Claims 29 to 

33, wherein: 

the software transport medium is a custom- 
programmed compact disk (CD) ROM medium; 

the software download medium is a bootable 
flexible diskette; and 

the storage is a hard disk drive. 

35. A method according to any one of Claims 29 to 

34, further comprising the acts of: 

storing in the software transport medium the 
software image and the software transport medium tag 
identifier file indicative of the unique identifier of 
the computer; and 
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storing in the software download medium: 
the software download medium tag identifier 
file indicative of the unique identifier of the computer 
and indicative of an identifier of the software transport 
5 medium tag identifier file; and 
an executable program; 

executing, by the executable program, a 
transfer of the software image from the software download 
medium to the storage. 

10 

36. A method according to Claim 35, in which the 
executable program clears the storage prior to transfer 
of the software image from the download medium to the 
storage . 

15 

37. A method according to Claim 35, further 
comprising: 

displaying, by the executable program, a 
warning message; and 
20 waiting for intervention prior to clearing the 

storage . 

38. A method according to Claim 35, in which the 
executable program reformats the storage prior to 

25 transfer of the software image from the download medium 
to the storage. 

39. A method according to Claim 38, further 
comprising: 

30 displaying, by the executable program, a 

warning message; and 

waiting for intervention prior to reformatting 
the storage. 
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40. A method according to Claim 34, wherein: 

the executable file routine operates without 
user intervention . 



41. A computer program product including computer 
usable media having computable readable code embodied 
therein executing the method according to any one of 
Claims 29 to 40. 

42. a software protection system permitting 
software to be downloaded to a storage of an authorized 
computer alone, the authorized computer having a unique 
identifier, the software protection system comprising: 

a computer- readable media containing: 

a software image formed for a hardware -software 
configuration of the authorized computer ; 

a tag identification file having an 
identification tag keyed to the unique identifier of the 
authorized computer; and 

an executable file including a routine for 
accessing the unique identifer, comparing the unique 
identifier to the identification key, and transferring 
the software image from the computer- readable media to 
the storage only if the unique identifier corresponds to 
the identification key. 

43. A software protection system according to Claim 
42, wherein the executable file routine accesses the 
unique identifier using an XBIOS call. 
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A software protection system according to Claim 
42, wherein the executable file routine accesses the 
unique identifier using a desktop management interface 
(DMI) call. 
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A software protection system according to Claim 
42, wherein the executable file routine accesses the 
unique identifier using a technique for reading a CMOS 
ROM. 
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46. A software protection system according to any 
one of Claims 42 to 45 , wherein the computer -readable 
media includes a first medium containing the software 
image and a first tag identification file having an 

5 identification tag keyed to the unique identifier of the 
authorized computer , and 

a second medium containing a second tag 
identification file having an identification tag keyed to 
the unique identifier of the authorized computer and an 

10 identification tag identifying the first tag 

identification file and an executable file including a 
routine for accessing first tag identification file via 
identification information in the second tag 
identification file, accessing the unique identifier, 

15 mutually comparing the unique identifier to the 
identification keys in the first and second tag 
identification files, and transferring the software image 
from the computer -readable media to the storage only if 
the unique identifier corresponds to the identification 

20 keys, 

47. a software protection system according to Claim 

46, wherein the executable file routine includes a 
subroutine for clearing the storage prior to transferring . 

25 the software image from the computer-readable media to 
the storage. 

48. A software protection system according to Claim 

47, wherein the executable file routine includes a 

30 subroutine for displaying a warning message and waiting 
for intervention prior to clearing the storage. 

49. A software protection system according to Claim 
46, wherein the executable file routine includes a 

35 subroutine for reformatting the storage prior to 
transferring the software image from the computer- 
readable media to the storage. 
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50. A software protection system according to Claim 
49, wherein the executable file routine includes a 
subroutine for displaying a warning message and waiting 

5 for intervention prior to reformatting the storage. 

51. A software protection system according to any 
one of Claims 46 to 50, wherein 

the first medium is a custom-programmed compact 

10 disk (CD) ROM medium; 

the second medium is a bootable flexible 

diskette; and 

the storage is a hard disk drive. 

15 s2m a software protection system according to any 

one of Claims 42 to 45, wherein computer-readable media 
includes a first medium containing the software image and 
a first tag identification file having a first 
identification tag keyed to the unique identifier of the 

20 authorized computer and a second identification tag keyed 
to a randomly-generated number, and 

a second medium containing a second tag 
identification file having a third identification tag 
keyed to the unique identifier of the authorized computer 

25 and a fourth identification tag keyed to the randomly- 
generated number and an executable file including a 
routine for comparing the second identification tag to 
the fourth identification tag, accessing the unique 
identifier, mutually comparing the unique identifier to 

30 the first identification tag and the third identification 
tag, and transferring the software image from the 
computer-readable media to the storage only if the second 
identification tag corresponds to the fourth 
identification tag, and the unique identifier corresponds 
35 to the first identification tag and the second 
identification tag. 
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53. A software protection system according to Claim 

52, wherein: 

the first medium is a custom-programmed compact 
5 disk (CD) ROM medium; 

the second medium is a bootable flexible 
diskette; and 

the storage is a hard disk drive. 

10 54 . A software protection system according to any 

one of Claims 42 to 53, wherein the executable file 
routine accesses a system ID code of the authorized 
computer and uses the system ID code to select the 
command . 

15 

55. A software protection system according to any 

one of Claims 42 to 54, wherein the unique identifier is 
a Service Tag. 

20 56. A software protection system according to Claim 

42, wherein the executable file routine operates without 
user intervention. . . _. 

57. A computer program product including computer 

25 usable media having computable reading code embodied 
therein comprising: 

a software protection system permitting 
software to be downloaded to a storage of an authorized 
computer alone, the authorized computer having a unique 
30 identifier, the software protection system including: 

a software image formed for a hardware -software 
configuration of the authorized computer; 

a tag identification file having an 
identification tag keyed to the unique identifier of the 
35 authorized computer; and 

an executable file including a routine for 
accessing the unique identifier, comparing the unique 
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identifier to the identification key, and transferring 
the software image from the computer- readable media to 
the storage only if the unique identifer corresponds to 
the identification key. 

58 _ a computer program product according to Claim 

57, wherein the computer usable media includes a first 
medium containing the software image and a first tag 
identification file having an identification tag keyed to 
the unique identifier of the authorized computer and a 
second medium containing a second tag identification file 
having an identification tag keyed to the unique 
identifier of the authorized computer and an 
identification tag identifying the first tag 
identification file and an executable file including a 
routine for accessing first tag identification file via 
identification information in the second tag 
identification file, accessing the unique identifier, 
mutually comparing the unique identifier to the 
identification keys in the first and second tag 
identification files, and transferring the software image 
from the computer -readable media to the storage only if 
the unique identifier corresponds to the identification 
keys. 

59 _ a computer program product according to Claim 

57, wherein the computer usable media includes a first 
medium containing the software image and a first tag 
identification file having a first identification tag 
keyed to the unique identifier of the authorized computer 
and a second identification tag keyed to a randomly- 
generated number and a second medium containing a second 
tag identification file having a third identification tag 
keyed to the unique identifier of the authorized computer 
and a fourth identification tag keyed to the randomly- 
generated number and an executable file including a 
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routine for comparing the second identification tag to 
the fourth identification tag, accessing the unique 
identifier, mutually comparing the unique identifier to 
5 the first identification tag and the third identification 
tag, and transferring the software image from the 
computer-readable media to the storage only if the second 
identification tag corresponds to the fourth 
identification tag, and the unique identifier corresponds 
10 to the first identification tag and the second 
identification tag. 

60. A computer program product according to Claims 

58 or 59, wherein: 
15 the first medium is a custom-programmed compact 

disk (CD) ROM medium; 

the second medium is a bootable flexible 
diskette ; and 

the storage is a hard disk drive. 
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